This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/2wVSH7DbbBFamwMCif6XQUtTxIk.roa File: 2wVSH7DbbBFamwMCif6XQUtTxIk.roa (raw, json) Hash identifier: nRU5pIxzuuO27+LNhKgzJMI29vhQdEwZEamj8NL3TdU= Subject key identifier: DB:05:52:1F:B0:DB:6C:11:5A:9B:03:02:89:FE:97:41:4B:53:C4:89 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019BDCD6A2341935EFABE2AC36DA2500900E Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/2wVSH7DbbBFamwMCif6XQUtTxIk.roa Signing time: Tue 20 Jan 2026 19:16:52 +0000 ROA not before: Tue 20 Jan 2026 19:16:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137517 IP address blocks: 45.153.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:d6:a2:34:19:35:ef:ab:e2:ac:36:da:25:00:90:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jan 20 19:16:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db05521fb0db6c115a9b030289fe97414b53c489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:f1:06:e7:2e:3e:d9:62:40:94:99:ad:36: ce:52:ca:87:87:4a:c0:12:63:e0:49:da:f2:ac:09: ae:42:41:73:98:77:05:c3:70:17:fb:2f:07:4c:b7: 57:66:f0:01:d0:9e:3f:7d:ca:17:ce:18:6d:b9:78: e6:eb:31:5a:b7:17:29:7b:fe:16:09:d5:c1:aa:32: df:a5:9b:88:68:50:55:f3:63:f2:bb:76:75:59:dd: a2:f6:97:ef:d6:7e:16:35:2d:04:25:56:f9:21:37: 04:c3:2d:4a:16:cc:b3:40:49:fe:cf:86:4c:94:62: 41:7c:01:d6:6e:b0:c6:54:cf:4a:e1:6a:60:e7:d6: 30:9f:f5:53:04:55:2c:0b:bd:4f:85:3d:b3:bc:37: b4:d3:0b:f7:8c:16:ad:08:e3:39:70:00:c3:43:e6: 56:4d:1d:66:25:52:26:ca:e9:d8:42:4c:0c:a1:73: aa:8e:b3:b6:d7:39:24:77:b9:5b:52:8d:02:c3:c5: 7e:72:38:be:86:13:41:59:ee:65:50:fa:99:0d:ec: 75:dd:d9:cb:97:e6:e5:7e:87:05:9b:41:e4:5d:81: 70:18:ae:ac:a0:00:a8:dd:00:cc:20:54:72:ac:92: 5f:71:b1:27:99:56:6f:12:8f:49:98:23:88:cf:4a: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:05:52:1F:B0:DB:6C:11:5A:9B:03:02:89:FE:97:41:4B:53:C4:89 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/2wVSH7DbbBFamwMCif6XQUtTxIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.166.0/24 Signature Algorithm: sha256WithRSAEncryption 90:55:30:73:96:3e:c3:49:45:54:c6:3c:9a:f5:b1:73:b8:80: af:24:51:9a:94:35:2f:62:c0:aa:fd:2d:36:b2:4e:98:30:52: d4:16:7d:9d:71:72:ec:04:73:8d:17:53:5c:1d:7e:d7:cc:9d: 05:a3:e1:26:a8:9e:fe:07:2c:44:eb:16:6f:2e:ad:22:77:e7: 04:0b:4e:52:ad:5f:84:cc:be:b7:ea:a4:d0:fb:73:d8:82:2e: 36:f8:e2:93:d8:14:f0:7c:a7:7c:66:84:b0:22:fb:42:92:77: 0f:39:32:45:47:ac:93:4e:d3:90:36:d9:ff:9c:47:e2:56:98: 0c:82:1a:3a:c0:24:fb:61:14:a7:c2:31:ec:e9:5d:03:30:42: c9:66:3a:85:9c:27:86:ba:8c:ad:8f:2c:2e:69:67:61:c9:51: 2a:42:37:7f:39:3f:20:bc:d8:00:7b:be:e1:99:3b:fd:c8:aa: 57:e2:e3:ac:46:38:5d:ae:93:e2:07:3e:b7:57:69:81:45:1a: 62:92:3f:f8:20:a5:46:27:dc:62:b5:ed:b1:db:d6:bf:5a:31: 01:67:f2:94:65:27:66:b1:cd:50:89:5b:b0:31:e7:92:29:76: 91:e4:46:82:c3:9a:da:05:c3:f3:27:88:bd:c6:b1:81:53:3e: aa:2d:a9:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvc1qI0GTXvq+KsNtolAJAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwMTIwMTkxNjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjA1NTIxZmIwZGI2YzExNWE5YjAzMDI4OWZlOTc0MTRiNTNjNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU3xBucuPtliQJSZrTbOUsqHh0rA EmPgSdryrAmuQkFzmHcFw3AX+y8HTLdXZvAB0J4/fcoXzhhtuXjm6zFatxcpe/4W CdXBqjLfpZuIaFBV82Pyu3Z1Wd2i9pfv1n4WNS0EJVb5ITcEwy1KFsyzQEn+z4ZM lGJBfAHWbrDGVM9K4Wpg59Ywn/VTBFUsC71PhT2zvDe00wv3jBatCOM5cADDQ+ZW TR1mJVImyunYQkwMoXOqjrO21zkkd7lbUo0Cw8V+cji+hhNBWe5lUPqZDex13dnL l+blfocFm0HkXYFwGK6soACo3QDMIFRyrJJfcbEnmVZvEo9JmCOIz0q5HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNsFUh+w22wRWpsDAon+l0FLU8SJMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvMndWU0g3RGJiQkZhbXdNQ2lmNlhRVXRUeElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZmmMA0G CSqGSIb3DQEBCwUAA4IBAQCQVTBzlj7DSUVUxjya9bFzuICvJFGalDUvYsCq/S02 sk6YMFLUFn2dcXLsBHONF1NcHX7XzJ0Fo+EmqJ7+ByxE6xZvLq0id+cEC05SrV+E zL636qTQ+3PYgi42+OKT2BTwfKd8ZoSwIvtCkncPOTJFR6yTTtOQNtn/nEfiVpgM gho6wCT7YRSnwjHs6V0DMELJZjqFnCeGuoytjywuaWdhyVEqQjd/OT8gvNgAe77h mTv9yKpX4uOsRjhdrpPiBz63V2mBRRpikj/4IKVGJ9xite2x29a/WjEBZ/KUZSdm sc1QiVuwMeeSKXaR5EaCw5raBcPzJ4i9xrGBUz6qLakH -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:54 2026 by rpki-client